$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf1e3ce5-db91-3629-bcfb-0531782d84b4.roa File: cf1e3ce5-db91-3629-bcfb-0531782d84b4.roa (raw, json) Hash identifier: 2LSVE+3ISJnzn1park2msSKhQ4D2dEzu8DTwPLuUBCA= Subject key identifier: 40:10:1A:44:A1:0B:DE:3F:DD:89:96:E9:B0:F9:D6:90:5A:15:3B:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA51F2C12A6B3BB65024A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf1e3ce5-db91-3629-bcfb-0531782d84b4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7015 IP address blocks: 2001:559:87c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:1f:2c:12:a6:b3:bb:65:02:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=aad54333-9cbd-4c3f-a786-1396bdb3fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:a6:e3:47:db:23:29:88:4f:24:6b:3b:69: e1:64:a0:44:0d:ca:91:94:df:5a:32:31:07:7c:00: e2:af:05:54:72:ab:ae:6b:92:c0:a0:01:73:06:b4: 40:7b:21:de:af:c3:2c:98:51:09:73:7c:95:19:eb: 78:ba:49:d3:59:2e:1b:3c:97:ad:18:3a:cf:c4:cb: 9c:2d:1e:85:59:9f:78:c2:be:c7:1f:29:9f:92:a2: 7a:19:55:a1:8c:47:1a:52:69:25:92:f3:86:be:6c: 81:53:94:9c:92:0a:2e:80:99:6d:31:34:36:f5:d0: 08:ce:ba:02:1f:30:77:29:0a:48:64:ac:73:4c:16: 23:f9:8b:70:11:2c:7b:e4:d5:59:16:06:9c:08:c8: 81:79:e8:af:7b:b9:32:6a:23:d0:ef:6b:88:d2:0d: 35:54:3a:ae:c7:2a:d0:51:88:cc:c0:b7:ee:74:48: fd:a0:da:de:a8:fe:82:d9:5f:1e:d6:d6:37:4b:16: 26:5d:f8:01:46:89:24:93:05:7d:16:fa:1d:06:f4: 72:56:be:7c:0e:af:3a:71:59:c3:39:8f:74:9e:b9: f2:d2:a6:95:25:4c:b6:ac:25:81:17:b0:76:b0:78: 62:a9:97:7e:18:88:b9:c9:50:e1:75:f2:3d:5d:eb: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:10:1A:44:A1:0B:DE:3F:DD:89:96:E9:B0:F9:D6:90:5A:15:3B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf1e3ce5-db91-3629-bcfb-0531782d84b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:77:f6:64:b9:6e:c5:58:00:42:90:5c:b7:b9:30:11:41:6e: 0e:5e:97:9a:e9:59:8c:98:ef:d2:0b:fa:05:c8:cd:ac:83:28: a1:25:b7:ab:5b:90:89:32:97:b6:0d:2e:59:8c:21:bb:30:d8: 51:93:2c:85:86:94:b2:e9:71:c7:f2:ec:bb:dc:c1:b8:52:96: 22:88:26:2f:2d:af:3a:24:9d:a2:ec:69:95:d2:5b:50:cf:fa: 02:4d:fc:9c:8c:69:97:5f:86:dc:a7:55:df:f8:67:99:e4:92: 48:d1:b7:b6:cb:74:3e:01:77:e1:3e:06:10:ff:d9:61:a5:e0: 63:19:f5:26:d8:ce:05:df:e0:e7:d9:8b:31:ad:f1:8d:0b:33: d9:9c:f0:bb:34:56:ed:6a:ac:d8:3d:82:e3:e6:e5:9e:17:00: d3:1f:5d:58:9c:ff:a3:5e:09:77:25:93:89:10:b8:f0:b3:e8: 83:d3:c7:99:f3:98:e4:9e:b2:ac:68:8f:76:86:5b:b6:60:fe: 5f:10:45:94:db:43:1b:55:12:74:11:e1:47:bc:f8:0f:07:4d: 10:bf:f8:bc:46:57:58:62:cb:20:44:a7:08:61:6c:61:4e:33: e4:2f:53:cc:1d:c5:4a:21:7b:45:48:ac:e4:34:d7:9a:12:29: 0b:b4:2f:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pR8sEqazu2UCSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YWFkNTQzMzMtOWNiZC00YzNmLWE3ODYtMTM5NmJkYjNmYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2em40fbIymITyRrO2nhZKBEDcqRlN9aMjEH fADirwVUcquua5LAoAFzBrRAeyHer8MsmFEJc3yVGet4uknTWS4bPJetGDrPxMuc LR6FWZ94wr7HHymfkqJ6GVWhjEcaUmklkvOGvmyBU5SckgougJltMTQ29dAIzroC HzB3KQpIZKxzTBYj+YtwESx75NVZFgacCMiBeeive7kyaiPQ72uI0g01VDquxyrQ UYjMwLfudEj9oNreqP6C2V8e1tY3SxYmXfgBRokkkwV9FvodBvRyVr58Dq86cVnD OY90nrny0qaVJUy2rCWBF7B2sHhiqZd+GIi5yVDhdfI9Xev9jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEAQGkShC94/3YmW6bD51pBaFTv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YxZTNjZTUtZGI5MS0z NjI5LWJjZmItMDUzMTc4MmQ4NGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYfE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIp39mS5bsVYAEKQXLe5MBFBbg5el5rpWYyY79IL+gXIzayDKKEl t6tbkIkyl7YNLlmMIbsw2FGTLIWGlLLpccfy7LvcwbhSliKIJi8trzoknaLsaZXS W1DP+gJN/JyMaZdfhtynVd/4Z5nkkkjRt7bLdD4Bd+E+BhD/2WGl4GMZ9SbYzgXf 4OfZizGt8Y0LM9mc8Ls0Vu1qrNg9guPm5Z4XANMfXVic/6NeCXclk4kQuPCz6IPT x5nzmOSesqxoj3aGW7Zg/l8QRZTbQxtVEnQR4Ue8+A8HTRC/+LxGV1hiyyBEpwhh bGFOM+QvU8wdxUohe0VIrOQ015oSKQu0L3I= -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:57 2025 by rpki-client